Container Networking Today Guido Appenzeller Chief Technology Strategy Officer, NSBU at VMware (NOTE: PASTE IN PORTRAIT AND SEND BEHIND FOREGROUND GRAPHIC FOR CROP)

Container networking today 2 Internal App Website Internet Database Port 80 Internal network

Tech preview: Containers with VMware NSX 3 Website Internet Internal network Physical network infrastructure Internal App Database Data center HONEY POT VULNERABILITY SCANNER Micro- segmentation Alert Connection to data center NSX provides segmentation, visibility, and integration

Micro- segmentation Alert Connection to data center Benefits of NSX and containers 4 Micro- segmentation Alert Connection to data center Micro-segmentation to establish clear boundaries Stop compromises at container or application level Central visibility into connectivity across the data center Per-flow tracking Alerts for suspicious behavior Virtual taps at a per- container level Integration with the rest of your IT infrastructure Monitoring, incident response, forensics Access to databases, backup, system updates

Docker Volume Driver for VMware vSphere and Virtual SAN 5 Photon Machine Persistent vSphere Datastore (Virtual SAN, VMFS, NFS) vSphere Container Virtual Machine vSphere Volume Driver Self-service, API-based delivers storage as code Plug-and-play, persistent docker volumes Proven storage services from HCI software leader Simple Programmable Feature Rich

Photon OS vSphere SDDC Photon Platform vSphere Integrated Containers Cloud-Native Infrastructure IT Ops Team Existing IT Environments Greenfield Cloud-Native Line of Business (Developers, DevOps, etc.) 3 rd -Party Clouds (AWS, Azure, GCE) Cloud-Native Framework Management Photon OS PaaS: Cloud Foundry Container Orchestration: Kubernetes, Marathon, Swarm Databases: EnterpriseDB, MongoDB Data Analytics: Hadoop, Spark Middleware: Kafka, RabbitMQ Cloud-Native Apps Overview

Container vSphere Integrated Containers How It Works Fast boot Container Virtual Container Host Image Cache Traditional App Guest OS Traditional App Guest OS Pico VMs #vmwcna

8 Photon Machine PhotonOS Photon Machine PhotonOS Photon Machine PhotonOS Photon Controller #1 Photon API Photon Controller: Clustered design delivers massive scale and high- availability. Docker Swarm Combination of local and/or shared ESX datastores. Photon Controller #2 Photon Controller #3 Photon Machine: Combination of core ESX with PhotonOS Create CF cluster Create Kubernetes cluster cf push cf scale kubectl create kubectl get pods Photon Platform How It Works

@cloudnativeapps #vmwcna vmware.github.io Thank You!